Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          iq4X+T+biGC0BmZ42CZzKtSAO+EDoxJyYKPAUP0mIns=
Subject key identifier:   B3:6D:C5:23:61:D6:2E:81:5F:6C:DB:24:97:33:B5:0E:8F:6F:F9:EF
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       01962F06641F28D5D551E41DCCBB9D515685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0A18
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (hash: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=)
                          2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: C+2xx0qTTJLENTZ4jGELUfnFG8vysjIT7FRO5HD1FM0=)
                          3: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (hash: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=)
                          4: KlGeCuL83ckpFDxEzckjMn7_6RE.roa (hash: sQSDNJGP0PRAc42NznmCEsFt8+XssPeUkQMlKcFGyeg=)
                          5: cI0Z3sLe1xjrCwyg19NbzVWgf58.roa (hash: RgqBJJ2OAbbh0xonFH0+36oQyNXiwKW4rTJMbCMMDzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:64:1f:28:d5:d5:51:e4:1d:cc:bb:9d:51:56:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=b36dc52361d62e815f6cdb249733b50e8f6ff9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:8e:82:65:92:8b:c0:89:0b:39:4b:c7:f0:
                    24:a0:76:a2:91:e0:27:94:58:89:29:5b:26:a8:17:
                    e1:10:10:ba:b1:c2:90:d2:1e:23:34:e9:14:b5:9d:
                    f9:f3:af:36:96:d6:e7:ff:97:24:63:a7:0a:6e:24:
                    bb:71:08:0c:fc:28:b5:64:d4:31:45:bd:c3:73:c5:
                    8e:30:12:19:25:d5:b2:8d:e4:9d:20:98:6b:a3:56:
                    56:dc:5a:c7:2c:64:d9:4e:00:ed:f5:e0:54:f9:c6:
                    da:1b:3d:52:c6:a8:1b:67:ef:63:8f:23:7b:dd:5d:
                    f7:e3:ec:54:d4:6c:ed:20:96:30:c8:15:fb:73:dd:
                    03:37:a6:bd:41:8f:65:ae:14:93:b7:bd:5e:57:9e:
                    6e:a7:7d:31:45:95:e7:21:d9:2b:ce:5a:a6:ea:19:
                    b3:76:6a:77:cb:04:e3:26:b0:e5:66:1f:68:db:a3:
                    9b:c9:b6:72:10:9e:5d:de:f2:90:f4:20:6c:c4:5d:
                    66:16:bb:bf:3f:ec:43:19:a4:6d:b6:b3:88:cd:dc:
                    2f:b0:5f:2a:78:82:dd:84:43:b3:77:ae:d1:24:88:
                    9e:10:d7:8a:4e:14:b9:0f:e1:c8:63:d7:38:8c:53:
                    cf:ae:e1:94:54:00:6d:17:ab:fb:d5:eb:95:dc:a4:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6D:C5:23:61:D6:2E:81:5F:6C:DB:24:97:33:B5:0E:8F:6F:F9:EF
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:2e:17:cd:ca:77:02:3f:5d:df:e8:7a:69:c4:28:f0:6a:71:
         9d:b8:18:29:23:6e:8f:b4:47:63:96:c7:38:f3:a7:01:14:b9:
         9a:57:a1:2e:e2:4a:4c:39:6d:35:70:a9:63:cd:ca:46:80:8b:
         48:f7:a4:1e:17:16:58:ee:e3:8b:04:b1:55:aa:c3:ec:92:f7:
         0f:2a:b8:05:96:ae:5a:ca:ca:a3:20:17:4d:f5:38:7c:c2:41:
         bb:97:ba:d3:45:e2:5d:5e:7f:0d:7c:e1:02:ea:84:79:9a:42:
         15:eb:e0:d3:b7:2d:8e:8d:f2:93:1d:75:f5:77:0d:51:12:ff:
         92:b7:06:ee:fe:ae:0b:e8:25:8a:bb:c1:a4:19:23:68:af:cd:
         5b:82:90:52:73:12:e6:a5:ca:a8:c7:51:6b:4d:4d:61:68:4d:
         71:33:2a:68:7c:91:55:f8:04:1a:b5:87:75:a4:be:80:7a:ce:
         5b:e0:d2:1f:cb:4c:e5:19:b8:13:53:36:57:57:73:7f:2b:d6:
         e8:55:af:a8:2c:eb:4a:c3:7e:7e:3f:c5:0e:7b:35:43:51:64:
         13:33:40:0f:f0:fb:9a:f1:10:84:90:6a:c8:12:fa:76:e5:4b:
         7c:c1:10:47:f3:af:18:dd:f7:20:b3:81:36:2d:00:7b:69:bc:
         71:43:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----